Vuldb Updates

A vulnerability labeled as critical has been found in Apple iOS and iPadOS. Affected by this vulnerability is an unknown functionality of the component Web Handler. The manipulation results in memory corruption. This vulnerability is identified as CVE-2025-24189. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability classified as problematic was found in Pucit.edu Com Onlineexam 1.5.0. Affected by this issue is some unknown functionality of the file index.php. Executing manipulation of the argument controller can lead to path traversal. This vulnerability is tracked as CVE-2010-1715. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability was found in Dev.pucit.edu.pk Com Market 2.0. It has been rated as problematic. This affects an unknown function of the file index.php. The manipulation of the argument controller leads to path traversal. This vulnerability is traded as CVE-2010-1722. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in Code-Garage Com Noticeboard 1.3. The affected element is an unknown function of the file index.php. The manipulation of the argument controller results in path traversal. This vulnerability is cataloged as CVE-2010-1658. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Emultisoft Com Jnewspaper 1.0. It has been rated as critical. The affected element is an unknown function of the file index.php. Performing manipulation of the argument date_info results in sql injection. This vulnerability is known as CVE-2010-1950. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability labeled as critical has been found in Com Newsfeeds on Joomla. The affected element is an unknown function of the file index.php of the component Newsfeed. The manipulation of the argument feedid results in sql injection. This vulnerability is known as CVE-2010-1739. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability was found in Ninjaforge NinjaMonials and classified as critical. This issue affects some unknown processing of the file index.php. Such manipulation of the argument Itemid leads to sql injection. This vulnerability is traded as CVE-2010-4991. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in IBM Engineering Requirements Management DOORS Next 7.0.2/7.0.3. It has been rated as critical. This affects an unknown part of the component Request Handler. The manipulation leads to time-of-check time-of-use. This vulnerability is referenced as CVE-2024-41787. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

A vulnerability identified as problematic has been detected in Shenzhen Libituo Technology LBT-T300-T400 3.2. This affects the function tftp_image_check of the file rc. The manipulation leads to incorrect default permissions. This vulnerability is referenced as CVE-2025-29570. The attack can only be performed from a local environment. No exploit is available.

A vulnerability classified as problematic has been found in IBM Sterling Partner Engagement Manager 6.1.0/6.2.0/6.2.2. This affects an unknown function of the component Helm Chart. The manipulation leads to password in configuration file. This vulnerability is listed as CVE-2025-33093. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability labeled as problematic has been found in IBM 4769 Developers Toolkit up to 7.5.52. Impacted is an unknown function of the component Hardware Security Module. The manipulation results in uncontrolled memory allocation. This vulnerability is identified as CVE-2025-3632. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability labeled as critical has been found in CodePhiliaX Chat2DB up to 0.3.7. This affects an unknown function of the file ai/chat2db/server/web/api/controller/data/source/DataSourceController.java of the component JDBC Connection Handler. The manipulation results in sql injection. This vulnerability is identified as CVE-2025-9148. The attack can be executed remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability described as critical has been identified in Surbowl dormitory-management-php up to 9f1d9d1f528cabffc66fda3652c56ff327fda317. Affected is an unknown function of the file /admin/violation_add.php?id=2. Such manipulation of the argument ID leads to sql injection. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is listed as CVE-2025-9150. The attack may be performed from a remote location. In addition, an exploit is available. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed.

A vulnerability classified as critical has been found in LiuYuYang01 ThriveX-Blog up to 3.1.7. Affected by this vulnerability is the function updateJsonValueByName of the file /web_config/json/name/web. Performing manipulation results in improper authorization. This vulnerability is cataloged as CVE-2025-9151. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in IBM App Connect Enterprise Certified Container. It has been classified as critical. This issue affects some unknown processing. This manipulation causes weak password requirements. This vulnerability is tracked as CVE-2025-1993. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Intelbras InControl up to 2.21.59. It has been rated as problematic. The impacted element is an unknown function of the component Dispositivos Edição Page. The manipulation of the argument Senha de Comunicação leads to unprotected storage of credentials. This vulnerability is documented as CVE-2025-4286. The attack can be initiated remotely. Additionally, an exploit exists. According to the vendor this issue should be fixed in a later release.

A vulnerability has been found in Soosyze CMS 2.0 and classified as problematic. The impacted element is an unknown function of the file /user/login. The manipulation leads to improper restriction of excessive authentication attempts. This vulnerability is documented as CVE-2025-52392. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability was found in Dell OpenManage Enterprise up to 4.2. It has been declared as problematic. This vulnerability affects unknown code of the component Backup. Executing manipulation can lead to sensitive information in log files. This vulnerability appears as CVE-2025-38745. The attack may be performed from a remote location. There is no available exploit.

A vulnerability classified as critical has been found in Kubernetes Image Builder up to 0.1.44. Affected by this issue is some unknown functionality. This manipulation causes hard-coded credentials. This vulnerability is handled as CVE-2025-7342. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Cisco ASA and Firepower Threat Defense. This vulnerability affects unknown code. Such manipulation leads to double free. This vulnerability is referenced as CVE-2025-20134. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.